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• U.S. nuclear arms operations face greater defensive vulnerabilities and a higher potential 
for accidents due to how federal agencies oversee contractors that manage atomic sites, a 
new report found. - Global Security Newswire (See item 7) 

• The U.S. Secretary of State took strong steps September 13 to distance the U.S. 
Government from a movie that has sparked protests and violence throughout the Muslim 
world, and has spread to at least five countries. - Washington Post (See item 23) 

• The developer of the Blackhole exploit kit released a new version that makes it more 
difficult to blacklist URLs pointing to Web sites containing malware, security experts said. 
- CSO Online (See item 31) 

• At least $3 mi llion in damage was done to businesses, homes, streets, and a dike, after 
heavy rains caused an earthen dike to collapse, sending a three-foot wall of water into 
Santa Clara, Utah. - Salt Lake Tribune (See item 39) 
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Energy Sector 



1. September 12, Associated Press - (California) Feds: Pipe wall in refinery fire was 
thin as penny. A corroded pipe that failed and triggered a leak and massive fire at one 
of California’s largest refineries had walls as thin as a penny in some areas, federal 
investigators said. U.S. Chemical Safety Board (CSB) officials said September 12 that 
a key part of their probe into the fire at the plant in Richmond is why Chevron Corp. 
did not replace the pipe during a routine inspection a year ago. The board previously 
found Chevron inspected and replaced a larger, corroded 12-inch pipe connected to the 
smaller one that failed August 6. “We have obtained internal Chevron policies that 
recommend that every segment of pipe in this service should have been included in the 
pipe inspection program,” said the lead investigator for the CSB. “There is no 
indication that this segment of pipe was inspected for thickness during the most recent” 
inspections. The blaze at the San Francisco Bay area facility knocked an important 
refinery unit offline, reducing production. Gas prices on the West Coast have surpassed 
$4 a gallon since the fire. In addition, smoke from the blaze sent thousands of residents 
to hospitals with health complaints. 

Source: http://www.businessweek.corn/ap/2012-09-12/feds-pipe-wall-in-refinerv-fire- 
was-thin-as-penny 

2. September 12, Associated Press - (Alaska) SE Alaska: gas spill from fuel barge 
leaves sheen. An Alaska spokesman said a gasoline spill from a fuel barge being 
transported near the southeast Alaska community of Hoonah caused a sheen on the 
water, the Associated Press reported September 12. A State Environmental 
Conservation Department spokesman said the crew of a tug transporting the Kirby 
Offshore Marine barge Leo noticed the sheen. They traced it to a 2-inch fracture 
between the bulkhead of a raised cargo tank and the barge deck. It is not known how 
much gasoline spilled. The affected tank contained more than 340,000 gallons. A 
spokesman said a temporary seal was put on the fracture and a small quantity of fuel 
still leaking is being contained on the barge deck. The spokesman said Kirby is 
developing a plan to transfer fuel from the affected tank to another tank on the barge. 
Source: http://www.sacbee.com/2012/09/12/4814925/se-alaska-gas-spill-from- 
fuel.html 



3. September 12, Nextgov - (National) Electromagnetic pulse could knock out U.S. 
power grid. U.S. power grids and other civilian infrastructure are not prepared for 
electromagnetic pulses (EMP) that could result from weapons or violent space weather, 
according to testimony at a Congressional subcommittee hearing September 12. 
Panelists at the House Homeland Security Subcommittee on Cybersecurity, 
Infrastructure Protection, and Security Technologies, told the Chairman there were 
serious flaws in the nation’s infrastructure that could allow for EMP events to shut 
down power and communications for extended periods. EMP disruptions and attacks 
can be triggered by various events, including high-altitude or low-altitude nuclear 
weapons detonations, locally based radio frequency weapons, and solar weather. One 
of the largest impacts from an EMP -based disruption was in Quebec, Canada in 1989, 
when nearly 6 million people lost power because of a geomagnetic storm. A spokesman 
with the Homeland Security Department’s National Protection and Programs 
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Directorate said DHS was working with federal agencies on contingency plans for an 
EMP event. He said the Federal Emergency Management Agency was establishing 
lines of communication with key agencies in case an EMP event occurs, and that the 
Homeland Security Secretary commissioned a report in 201 1 to study the impact of 
space-based EMP attacks. 

Source: http://www.nextgov.com/defense/2012/09/electromagnetic-pulse-could-knock- 
out-us-power-grid/58069/ 

For another story, see item 5 
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Chemical Industry Sector 

4. September 13, Milwaukee-Wisconsin Journal Sentinel - (Wisconsin) Testing begins 
on chemicals in abandoned Slinger factory. September 13, a federal emergency 
response team began testing samples of hazardous chemicals collected from 1 16 
containers of all sizes inside an abandoned metal plating factory in Slinger, Wisconsin. 
Later September 13 and 14, the crew planned to begin sorting the chemicals, separating 
acids from caustic solutions, so they can be prepared for shipping and disposal the 
week of September 17, said the on-scene coordinator for the U.S. Environmental 
Protection Agency’s Superfund program in Chicago. Air monitoring equipment was 
placed in the neighborhood around the former Niphos Coatings factory to warn if 
chemicals are released to the air during the cleanup, he said. By the weekend of 
September 15, contractors will begin combining contents of containers to consolidate 
the hazardous substances into a smaller number of containers. Investigators found at 
least two extremely hazardous chemicals — nitric acid and sodium cyanide. Other 
hazardous and toxic chemicals discovered were nickel sulfate, used to plate metal 
products with a nickel finish, copper cyanide, and hydrochloric acid. Niphos Coatings 
closed in March 2010. 

Source: http://www.isonline.com/news/ozwash/testing-begins-on-chemicals-in- 
abandoned-slinger-factory-ua6rmkt-169630386.html 

For another story, see item 1 
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Nuclear Reactors, Materials and Waste Sector 

5. September 11, Chattanooga Times Free Press - (Tennessee) Two nuke plants saw 
unplanned reactor shutdowns last month. The Sequoyah and Watts Bar nuclear 
power plants in Tennessee both had electrical problems that caused the power plants to 
scram during August, a Tennessee Valley Authority (TVA) spokesman said, according 
to the Chattanooga Times-Free Press September 11. In the shutdowns, the reactors — 
Unit 1 at Watts Bar and Unit 2 at Sequoyah — functioned as they were designed to, 
and neither the plants nor the workers or public were put at risk. Sequoyah tripped 
August 16 following an electrical short in one of the four reactor coolant pumps. It was 
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returned to power August 18. Watts Bar shut down August 28 when a worker 
inadvertently caused a fault in one of the unit’s instrumentation systems by plugging in 
a testing device that was incorrectly calibrated. The reactor was returned to power 
August 30. But having two local reactors quit in the same short time period is unusual, 
and unplanned outages can create difficulties for a utility, the spokesman 
acknowledged. While the reactors are not generating power, even for just a few hours 
or days, TVA must increase power generation at other plants and sometimes bring idled 
plants online. 

Source: http://www.timesfreepress.eom/news/2012/sep/l 1/9-1 1-b 1-two-nuke-plants- 
shut-down-last-month/ 



For another story, see item 7 
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Critical Manufacturing Sector 

See item 4 
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Defense Industrial Base Sector 

6. September 13, Softpedia - (International) Page: Critical limited edition malware 
targets defense industry. Researchers analyzed a piece of malware called Page. They 
found the critical limited edition malware is masqueraded as a PDF file and sent out to 
companies in the aviation defense industry. When victims open the apparently innocent 
PDF file, they are presented with an invitation to an upcoming industry event. While 
the user views the invitation, a vulnerability in collab.hetlcon() is exploited to create 
and execute a file. Once it is executed, the file drops a DLL, which opens a backdoor at 
TCP port 49163 and initiates network communications, Fire Eye experts explained. 
Source: http://news.softpedia.com/news/Page-Critical-Limited-Edition-Malware- 
Targets-Defense-Industrv-291955.shtml 

7. September 13, Global Security Newswire - (National) DOE, NNSA management 
faults bolster nuclear risks, auditors warn. Nuclear arms operations in the United 
States face greater defensive vulnerabilities and a higher potential for accidents as a 
result of shortcomings in how the Energy Department and the National Nuclear 
Security Administration oversee the private firms that manage atomic complex sites, 
the U.S. Government Accountability Office (GAO) said in a report published 
September 12. The Energy Department has moved to strengthen efforts against 
potential atomic mishaps in response to both historical and newer hazardous events, but 
personnel at scientific facilities and elsewhere have suggested the management 
initiatives are overextended and unnecessarily meddlesome, auditors wrote in the 
document. The department responded by scaling back internal rules, but Congressional 
investigators in April said the effort’s achievements were uncertain due to a failure to 
assess the degree to which older rules had interfered with activities, the GAO officials 
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said. 

Source: http://www.nti.org/gsn/article/nnsa-management-faults-bolster-risks-auditors- 
say/ 
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Banking and Finance Sector 

8. September 13, Softpedia - (International) Visa to introduce point-to-point encryption 
service to payment terminals. At the end of August, Visa revealed its plans to 
introduce a new point-to-point encryption (P2PE) service called Visa Merchant Data 
Secure, Softpedia reported September 13. The service — which will be made available 
at the beginning of 2013 — will aim at securing payment terminals and other critical 
systems across the industry. The P2PE technology will allow merchants to protect 
sensitive cardholder information by encrypting data within the payment -processing 
environment. The encryption keys will be guarded by Visa, the gateway, or the firm 
that acquires the service. According to a member of the Visa Risk Group, the new 
service is not required yet, but it is a tenet of the PCI Data Security Standard. 

Source: http://news.softpedia.com/news/Visa-to-Introduce-Point-to-Point-Encryption- 
Service-to-Payment-Terminals-29 1895 .shtml 

9. September 13, KTLA 5 Los Angeles - (California) Bank manager’s boyfriend 
arrested in fake bomb robbery. A man was arrested in connection with a bank 
robbery in Los Angeles during which the manager said she was kidnapped and forced 
to rob her own bank while wearing what she thought was a bomb, KTLA 5 Los 
Angeles reported September 13. The man was taken into custody the day after the 
September 5 heist. He was charged with conspiracy and robbery. There were 
unconfirmed reports that he was romantically involved with the bank manager. Police 
did not release any further details, saying the investigation was ongoing. 

Source: http://www.ktla.eom/news/l anding/ktla-east-la-bank-robberv,0,986798.story 

10. September 12, Inland Valley Daily Bulletin - (California) Ten arrested in loan 
modification scam. Ten people who allegedly preyed on homeowners’ fears due to the 
housing market crisis were arrested by federal agents September 12 after they were 
linked to a loan modification scam that authorities say bilked thousands of distressed 
homeowners out of at least $7 million. The alleged scam, which investigators said 
made false promises and guarantees of the group’s ability to provide homeowners loan 
modifications, was run out of 21st Century Real Estate Investment Corp. in Rancho 
Cucamonga, California, according to a news release from the U.S. attorney office in 
Los Angeles. More than 4,000 people were victimized by the scammers between June 
2008 and December 2009, authorities said. 21st Century made false promises and 
guarantees about the group’s ability to modify loans with mortgage lenders, falsely 
claimed that it was operating a U.S. government-sponsored program, and instructed 
home owners to cease communication with mortgage lenders and instead go through 
the company, the indictment alleged. The suspects were arraigned September 12 in 
court on nine felony counts, including five counts of mail fraud, three counts of wire 
fraud, and one count of conspiracy. Each count in the indictment carries a maximum 
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penalty of 20 years of imprisonment. 

Source: http://www.dailybulletin.com/ci 21529670/ten-arrested-loan-modification- 
scam 



11. September 12, Associated Press - (Kansas; Oklahoma) Feds charge 7 in $132 million 
investment scheme. The federal government indicted seven men who allegedly 
cheated investors out of $132 million with false promises and phony reports about 
companies that leased drilling rigs and related businesses, the Associated Press reported 
September 12. The U.S. attorney’s office in Wichita, Kansas, announced the 
indictment. The defendants are charged with mail fraud, wire fraud, and money 
laundering, among other counts. Six of the men were residents of Kansas, and one of 
Oklahoma. 

Source: http://www.sacbee.com/20 1 2/09/12/48 1 3627/feds-charge-7 -in- 1 32-million- 
investment.html 



12. September 12, Los Angeles Times - (California) Robbery suspects toss cash into air 
during pursuit. A pair of bank robbery suspects September 12 led cops on a bizarre, 
dangerous pursuit in Los Angeles, hurling fistfuls of stolen cash from their car in a 
failed getaway bid that sent hundreds of people scrambling into the path of oncoming 
police cars as they lunged after the flying bills. Four armed men held up a Bank of 
America branch and fled in a SUV that was reported stolen hours earlier, police said. 
Shortly after a police pursuit began, two of the men bailed from the vehicle but were 
taken into custody, said a spokesman for the sheriff’s department. As the men sped 
through congested neighborhoods, one suspect threw loose bills from the vehicle’s 
window. As he continued tossing the money in intermittent bursts, people in the area 
took to the curbs. The suspect waited until the car reached corners with large gatherings 
of people before sending more plumes of bills out the window, seemingly to maximize 
the number of people who would scramble into the street. Sheriff’s deputies were 
forced to slow and swerve to avoid hitting people. With so many people following their 
escapade, the streets became congested with cars and pedestrians. As they tried to 
navigate along a clogged street, the SUV became trapped behind a truck. Sheriff’s 
deputies then swarmed the vehicle and pulled the suspects out. 

Source: http://www.latimes.com/news/local/la-me-bank-robbery- 
20120912,0,6072960.story 



13. September 11, WWBT 12 Richmond - (Virginia) Police search for woman accused in 
4 Chesterfield bank robberies. Chesterfield, Virginia police are searching for a serial 
bank robber who threatened a clerk with a bomb during her most recent heist, WWBT 
12 Richmond reported September 11. Investigators said the woman’s crime spree has 
spanned more than a month and, in most cases, she wears a disguise. Covered in a scarf 
and sunglasses July 12 at a Wells Fargo Bank, investigators said she passed a teller a 
note demanding money. Police said she struck two other banks on that same road in 
August. August 6, the woman concealed her face in a robbery at the Bank of Southside 
Virginia. A week later, she is accused of donning a wig in a hold up at the Virginia 
Commonwealth Bank. “In the first three (bank robberies) she displayed a firearm. She 
didn’t threaten anyone with a firearm, but she made it clear that she had a firearm,” said 
a Chesterfield police lieutenant. In the most recent robbery, investigators said the 
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suspect brought in a suspicious-looking package and told employees it was a bomb 
September 7 at the Virginia Credit Union. 

Source: http://www.nbcl2.com/story/19507794/police-search-for-woman-accused-in- 
4-chesterfield-bank-robberies 



14. September 11, WFOR 4 Miami - (Florida) Pembroke Pines police arrest suspect in 
multiple bank robberies. Multiple law enforcement agencies were set to announce the 
arrest of a suspect they believed is responsible for at least four bank robberies in south 
Florida and other States, WFOR 4 Miami reported September 11. The robber wore a 
polo shirt in most of the heists he is accused of pulling off. He also used disguises 
including a dark wig. Pembroke Pines police, Miramar police, and the FBI assisted in 
the arrest of the suspect. Law enforcement said the robber allegedly struck a Wells 
Fargo in Pembroke Pines as well as a Chase Bank in Miramar September 1 1 . The other 
two bank robberies connected to the suspects happened at a Bank Atlantic August 29, 
and at a Chase Bank September 4. A police captain said when officers took the suspect 
down, he had on a bulletproof vest and was carrying a weapon. 

Source: http://miami.cbslocal.com/2012/09/ll/pembroke-pines-police-arrest-suspect- 
in-multiple-bank-robberies/ 

15. September 10, Associated Press - (Georgia; International) Counterfeit bills from 
South America flooding US. Counterfeit money smuggled into the United States from 
Peru is continuing to find its way to Georgia, the Associated Press reported September 
10. The bills are being smuggled from South America a year after authorities broke up 
a ring that flooded the Athens, Georgia area with the fake money, the Athens Banner- 
Herald reported. Details of the South American counterfeiting scheme were revealed 
when a man pleaded guilty the week of September 3 in court in Athens on a charge of 
possession of counterfeit currency. Peru has become the world’s counterfeiting capital, 
the Banner- Herald reported. Peruvian counterfeiters produce about 17 percent of all 
fake currency circulating in the United States, authorities said. 

Source: http://www.sfgate.com/news/article/Counterfeit-bills-from-South-America- 
flooding-US-3852812.php 

For another story, see item 33 
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Transportation Sector 

See items 2, 12, 39, and 40 
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Postal and Shipping Sector 



See item 40 
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Agriculture and Food Sector 



16. September 12, U.S. Food and Drug Administration - (National) Whole Foods Market 
recalls cheese in 21 states and Washington, D.C. because of possible health 

risk. Whole Foods Market announced that it is recalling ricotta salata sold in 21 States 
and Washington, D.C., that came from its supplier Forever Cheese Inc. of Long Island 
City, New York. Forever Cheese recalled this cheese product because it may be 
contaminated with Listeria monocytogenes, the U.S. Food and Drug Administration 
reported September 12. Fourteen illnesses have been reported that may be associated 
with the Frescolina recall. 

Source: http://www.fda.gov/Safety/Recalls/ucm319304.htm 

17. September 12, Food Safety News - (Iowa) Employee of egg farm linked to 2010 
Salmonella outbreak tried to bribe USDA Inspector. A former manager at the Iowa 
farm responsible for the largest egg recall in history and the 2010 Salmonella outbreak 
that sickened nearly 2,000 people will plead guilty to conspiring to bribe a federal 
inspector to overlook health violations at the facility, Food Safety News reported 
September 12. A former employee of Wright County Egg was accused of authorizing 
another worker to give $300 to an inspector from the U.S. Department of Agriculture 
(USDA) in a complaint filed September 1 1 in the U.S. District Court of Northern Iowa. 
The funds were intended to convince the USDA official to allow the sale of eggs that 
had been held after failing to meet agency standards, according to the complaint. He 
allegedly authorized the release of these funds August 12, 2010, the day before the first 
of three egg recalls for potential Salmonella contamination was announced by the U.S. 
Food and Drug Administration. Five days later, the Wright County recall was expanded 
to include 380,000 shelled eggs. August 20, DeCoster’s Hillandale Farms recalled 
about 170,000 of its eggs, bringing the total number of recalled eggs to 550 million. In 
addition to trying to distribute sub-standard eggs for sale to consumers, the suspect was 
accused of attempting to label the facility’s eggs with a higher grade level than the one 
awarded to them by USDA. He allegedly pushed for “the inclusion of labeling falsely 
indicating the eggs met a quality grade standard under rules promulgated by the 
USDA,” and “the omission of labeling to indicate the eggs ... could not be lawfully 
sold.” He agreed to plead guilty at a hearing September 12. 

Source: http://www.foodsafetvnews.com/2012/09/employee-of-egg-farm-linked-to- 
2010-salmonella-outbreak-tried-to-bribe-usda-inspector/#.UFHbvK66TlY 

18. September 10, Associated Press - (California) USDA buying meat again from Calif, 
slaughterhouse. The U.S. Department of Agriculture (USDA) is buying meat again 
from a Central California slaughterhouse that was at the center of an animal cruelty 
investigation. A statement the USDA issued September 10 said that Central Valley 
Meat Co.’s improved oversight for animal welfare prompted the government to 
reinstate purchases for federal feeding programs from the Hanford facility. Officials 
with the Food Safety and Inspection Service concluded the week of September 3 that 
there was no evidence of sick cattle entering the food supply after an undercover video 
showed workers kicking and shocking downed cattle to herd them to slaughter. The 
USDA will conduct quarterly audits at the company until it successfully completes four 
audits in a row. The government suspended its purchases in August after seeing the 
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video recorded by the animal welfare organization Compassion Over Killing. 

Source: http://www.sacbee.com/2012/09/10/4806894/usda-buving-meat-again-from- 
calif.html 
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Water Sector 



19. September 13, Associated Press - (California) Riverside County declares state of 
emergency. Riverside County, California, declared a state of emergency after severe 
flooding forced hundreds of people from their homes September 12 so they can apply 
for state and federal money to help with cleanup and rebuilding costs. Eleven homes 
were without power and people relied on bottled water in Duroville, a mobile home 
park. County officials said they plan to ship water to the community. Heavy rains sent 
water rushing into low-lying areas. Much of the water drained or flowed away from 
Duroville toward the nearby Salton Sea, but troubled spots remained. One of the two 
water pumps at the mobile home park damaged by the flooding was repaired and 
authorities checked to see if the sewer system was compromised. 

Source: http://www.mercurynews.com/breaking-news/ci 21533469/riverside-county- 
declares- state-emergency 

20. September 12, Associated Press - (New Jersey) Water turns brown at Newark 
Airport. Newark, New Jersey officials were investigating the cause of an apparent 
problem with the water supply in and around Newark Liberty International Airport, the 
Associated Press reported. The Port Authority of New York and New Jersey issued an 
alert September 12 that brown-colored water was coming into the airport’s terminals 
and other buildings from public utility sources. Airport travelers were being urged to 
use bottled water. Newark city officials said there was no evidence that the water is 
unsafe to drink. The city’s water and sewer utilities agency said they were flushing out 
water pipes at fire hydrants to try and eliminate the discoloration. 

Source: http://www.niherald.com/storv/19525667/water-tums-brown-at-newark-airport 
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Public Health and Healthcare Sector 



21. September 13, Associated Press - (Utah) Utah agency extends deadline for data 
breach victims. The Utah Department of Health extended the deadline for victims of a 
massive data breach to receive identity protection, the Associated Press reported 
September 13. State officials announced in May that hackers broke into a government 
server and stole the personal information of about 780,000 people, including the Social 
Security numbers of about 280,000. The agency said that those whose Social Security 
numbers were stolen now have until September 30 to register for free credit 
monitoring. Health department officials said that only about 20 percent of victims have 
so far enrolled for the service. 

Source: http://www.standard.net/stories/2012/09/13/utah-agency-extends-deadline- 
data-breach-victims 
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22. September 12, Reuters - (Florida) U.S. revoking 2 CVS stores’ controlled substance 
licenses. The U.S. Drug Enforcement Administration (DEA) revoked the controlled 
substance licenses of two CVS Caremark Corp drugstores in Sanford, Florida, as part 
of a government crackdown on potentially addictive painkillers, especially oxycodone, 
according to a court filing, Reuters reported September 12. The DEA alleged the two 
stores were inappropriately filling prescriptions for oxycodone, and also had suspicious 
sales of other controlled substances. CVS contends that the high volume of oxycodone 
and other prescription painkillers from the two stores arose because they were busy 
pharmacies, being close to Interstate Highway 4 — with one store operating 24 hours a 
day. The license revocations will take effect 30 days from the date the order is 
published in the Federal Register, according to the filing. 

Source: http://whtc.com/news/articles/2012/sep/12/dea-revokes-controlled-substance- 
licenses-of-two-cvs-drugstores/ 
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Government Facilities Sector 



23. September 13, Washington Post - (International) Protests sweep through Muslim 
world despite U.S. appeal for calm. The U.S. Secretary of State took strong steps 
September 13 to distance the U.S. Government from a movie that has sparked protests 
and violence throughout the Muslim world. In Tripoli, Libya, authorities said a number 
of people suspected of involvement in an attack on the U.S. Consulate in Benghazi that 
killed the U.S. Ambassador and three other U.S. officials were detained by security 
forces. September 13, in Sanaa, Yemen, hundreds of demonstrators converged on a 
usually sealed-off street in front of the U.S. Embassy for a protest that also turned 
violent, witnesses said. A State Department spokeswoman said there had been “a small 
breach of the compound perimeter but no breach of embassy buildings” in Sanaa. She 
said Yemeni security forces were “in the process of restoring order”. Smaller anti- 
American protests were reported in Iran and Bangladesh. In Dhaka, the Bangladeshi 
capital, about 100 demonstrators burned an American flag September 13 and chanted 
slogans. They called for more protests September 14 and said the U.S. Embassy could 
be the target. Bangladeshi police said security at the embassy was being enhanced. In 
Tehran, anti- American protesters gathered outside the Swiss Embassy, which 
represents U.S. interests in Iran. 

Source: http://www.washingtonpost.com/world/us-embassv-in-vemen-stormed-other- 
embassies- still-under-siege/20 1 2/09/ 1 3/ad65ce7e-fd9b- 1 1 e 1 -a3 1 e- 
804fccb658f9 story.html 

24. September 13, Reuters - (International) U.S. Consulate in Berlin evacuated in false 
alarm. German authorities evacuated part of the United States consulate in Berlin 
September 14 when an employee experienced breathing difficulties after handling a 
passport, but police said they could find no suspicious substances. Police investigators 
in chemical protection suits and masks searched the building but pronounced it safe for 
staff to return to work after several hours. An employee at the visa section had reported 
breathing difficulties and a metallic taste in her mouth after opening a passport handed 
to her by a male visitor, believed to be Albanian, police said. The alarm came amid 
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attacks on U.S. embassy and consulate buildings across the Middle East. 
Source: http://www.reuters.com/article/2012/09/13/us-germany-usa-consulate- 
idUSBRE88C0KG20120913 



25. September 13, Baltimore Sun - (Maryland) Man shot on Morgan State 
campus. Morgan State University in Baltimore, Maryland, was placed on emergency 
lockdown and classes were canceled September 12 after a man was shot on campus. 
Many students had just gotten out of class for the day, and others were preparing for 
evening lectures when gunfire rang out in Morgan’s student center. A message sent 
through Morgan’s campus alert system soon aired a warning. The victim was in critical 
but stable condition. He was not a student, according to a university spokesman, and 
officials do not believe the shooter was either. The assailant remained at large. The 
university spokesman emphasized the shooting was not a random act, and he said the 
university took the precaution of “combing every building on campus.” 

Source: http://www.baltimoresun.com/news/breaking/bs-md-morgan-state-shooting- 
20120912,0,875090.story 

26. September 12, Associated Press - (Vermont) Vt. police call bomb threat domestic 
terrorism. A false report of bombs and a gunman on the way to Montpelier High 
School September 12 is linked to similar threats last spring and is considered an act of 
domestic terrorism, Montpelier, Vermont police said. The Montpelier High School was 
locked down after a phone caller reported shortly before noon that a gunman was en 
route. The threat included multiple bombs. Police determined the threat was a hoax, 
similar to other false threats made April 5, and the lockdown was cancelled about 45 
minutes later, authorities said. The threats are being made through computer networks 
involving a host of Internet and landline service providers. In April, the Montpelier 
Police Department issued a number of subpoenas in the United States and Europe. A 
suspect or suspects have been identified in Europe. The case is being handled by 
federal authorities, working with foreign law enforcement in that country, police said. 
Source: http://www.boston.com/news/education/2012/Q9/12/vermont-high-school- 
lockdown-over/CG4wtW6iliPUFNNTclJXnN/story.html 

27. September 12, FierceGovernmentlT - (National) NTIA IT security ‘significantly’ 
deficient, says OIG. Information technology systems at the National 
Telecommunications and Information Administration (NTIA) have significant 
deficiencies, according to a September 7 report from the Commerce Department Office 
of Inspector General (OIG), FierceGovernmentlT reported September 12. Among the 
problems are poor security categorizations, weak software and hardware inventory 
practices, lacking remediation of security problems, mismanaged IT security personnel, 
and deficient IT security policies and procedures. Report authors found five 
miscategorized NTIA systems that should have been categorized at a higher security 
impact level. Without a solid understanding of its assets, NTIA cannot accurately 
determine risks posed to the system and select appropriate security controls, says the 
OIG. The agency failed to properly identify all of its hardware and software 
components. Auditors identified 44 servers and 2 operating systems that were not listed 
in NTIA’s official inventory. They found frequent instances of unsupported and 
outdated software, and unauthorized movies and games associated with peer-to-peer 
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file sharing. The report recommends that system owners and NTIA officials identify 
and categorize all “information types that are processed, stored, or transmitted by each 
system,” develop and maintain an accurate inventory, assess and implement IT security 
controls, and follow NTIA security policies. 

Source: http://www.fiercegovernmentit.com/storv/ntia-it-securitv-significantlv- 
deficient-says-oig/20 12-09- 12 

28. September 12, KDFW 4 Dallas-Fort Worth - (Texas) Lab mishap sends students to 
hospital. A mishap in a biology class at an Arlington, Texas high school sent several 
students and their teacher to the hospital September 12. Students in the lab said they 
were working on an experiment to test for proteins and amino acids. It involved mixing 
several chemicals. The teacher opened a vial under a vent hood and it caused an 
unexpected reaction that released fumes that smelled like burning chemicals, they said. 
The teacher and five students were overcome by nausea, dizziness, and headaches. 
They were taken to the hospital for evaluation. The rest of the class was evacuated. 
School officials also moved students from seven other nearby classrooms to keep them 
from being exposed to the fumes. An Arlington Fire Department HAZMAT crew was 
called to make sure the rooms would be safe for class September 13. 

Source: http://www.myfoxdfw.com/storv/19528834/lab-mishap-sends-students-to- 
hospital 

For more stories, see items 3, 21, 40, and 42 
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Emergency Services Sector 

29. September 13, Effingham Daily News - (Illinois) 911 centers struggle with 

communications. Officials in Effingham County, Illinois, continue to wrestle with the 
long-standing issue of radio interoperability for police officers, Effingham Daily News 
reported September 13. At least one member of the county’s Emergency Telephone 
System (9-1-1) board believes now is not the time to drop the issue. In a statement read 
at a September 1 1 board meeting, he proposed his solution to the problem that has 
existed since the fall of 2011, when Effingham city police implemented the STARCOM 
radio system. Since then, Effingham County sheriff’s deputies have repeatedly 
complained they cannot effectively communicate with city police in field situations that 
are potentially dangerous for police officers. The board member proposed allowing an 
existing patch to operate for 2 more weeks. In the meantime, he said, a radio expert at 
Barbeck Communications would try to make the patch work better. The board will hold 
a special meeting September 26 to discuss the effectiveness of the patch. 

Source: http://effinghamdailynews.com/local/x72183702/911-centers-struggle-with- 
communications 



30. September 13, Associated Press - (Massachusetts) Lawyers expect appeals in Mass, 
crime lab case. The Associated Press reported September 13 that revelations by a 
chemist that she was in charge of quality control at a Massachusetts crime lab that was 
shut down by State police in August because of her alleged mishandling of drug 
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samples could lead to large numbers of drug convictions being challenged, some 
defense attorneys said. State police closed the lab August 30 after their investigation 
showed the chemist failed to follow testing protocols and may have deliberately 
mishandled drug samples. A tally of her cases turned over by State police to defense 
attorneys and prosecutors shows she was involved in testing more than 50,000 drug 
samples covering approximately 34,000 defendants during her tenure at the lab, from 
2003-2012. State police said they do not know how many samples may have been 
tainted, but lawyers said they expect legal challenges because of the scandal. 

Source: http://www.boston.com/news/local/massachusetts/2012/09/13/lawvers-expect- 
appeals-mass-crime-lab-case/o7pkRZOdvlrakZ6ScYAkYP/story.html 

For another story, see item 3 
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Information Technology Sector 

31. September 13, CSO Online - (International) Blackhole creator releases stealthier 
exploit kit. The developer of the Blackhole exploit kit has released a new version that 
makes it more difficult to blacklist URLs pointing to Web sites containing malware. 
Blackhole version 2.0 was introduced September 1 1 on the Russian site Malware don’t 
need Coffee. The toolkit, which is popular among cyber criminals, contains many new 
features meant to avoid detection from antivirus software. Other improvements include 
support for Windows 8 and unspecified mobile platforms. Security experts said the 
most interesting new feature was the ability to generate short-term, random URLs 
pointing to malicious Web sites or hijacked sites that contain hacker-installed malware. 
Because the URLs keep changing, it is difficult for search engines, site owners, and 
security firms to identify malicious pages. 

Source: http://www.csoonline.com/article/716093/blackhole-creator-releases-stealthier- 
exploit-kit 

32. September 13, The H - (International) Apple closes more than 160 security holes in 
iTunes. The latest update to the Windows version of Apple’s iTunes media player 
closes an alarming number of security holes. According to the company, iTunes 10.7 
for Windows addresses 163 vulnerabilities, all of which are in the WebKit browser 
engine used by the media player to display HTML-based pages in its iTunes Store. 
Apple noted these security issues could be exploited by an attacker to inject and 
execute arbitrary code on a victim’s system. 

Source: http://www.h-online.com/security/news/item/Apple-closes-more-than-160- 
security-holes-in-iTunes-1706849.html 

33. September 13, The Register - (International) Microsoft seizes Chinese dot-org to kill 
Nitol hot army. Microsoft disrupted the emerging Nitol botnet and more than 500 
additional strains of malware by taking control of a rogue .org Web site. The 
company’s Operation b70 team discovered criminals were selling computers loaded 
with counterfeit software and malware — including malware that takes control of each 
machine to carry out orders from the Nitol central command server. Operation b70 
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uncovered the industrial-scale scam during an investigation into insecure supply chains. 
Microsoft blames corrupt but unnamed resellers in China. Computers in the Nitol 
botnet would communicate with a command server whose DNS was provided by 
Chinese-run 3322.org, which has been linked to malicious activity since 2008. 
Microsoft investigators also discovered that other servers using 3322.org, which offers 
its services for free, harbored more than 500 different strains of malware across more 
than 70,000 sub-domains. These variants included key-stroke loggers and banking 
trojans. 

Source: http://www.theregister.co.uk/2012/09/13/botnet takedown/ 

34. September 12, Softpedia - (International) Researchers notice increase in pay-per- 
install schemes targeting Android devices. Security firms continually reiterate that 
malware designed for mobile devices is far less profitable for cyber criminals than 
malware designed for desktop computers. However, recent investigations show mobile 
malware is becoming more and more profitable. ESET experts discovered a 
considerable increase in the number of pay-per-install campaigns that threaten Android 
owners. 

Source: http://news.softpedia.com/news/Researchers-Notice-Increase-in-Pay-Per- 
Install-Schemes-Targeting-Android-Devices-291763.shtml 

35. September 12, Dark Reading - (International) The data-annihilation attack is 
back. The data-destroying Shamoon malware and recent wave of aggressive targeted 
attacks against utilities in the Middle East should serve as a wake-up call for all types 
of organizations to be prepared for a whole other aspect of a breach — losing data and 
systems to destructive hacks. Data-destruction attacks are not new, but have been rare 
in the past decade or so as financially motivated cyber crime and cyber espionage have 
been at the forefront of threats mainly focused on monetizing stolen information. 
Hacktivists, meanwhile, have employed data-wiping from time to time, but not in the 
volume or mass approach that Shamoon can accomplish. Shamoon is already being re- 
purposed for attacking additional victims: Seculert has already discovered several 
Shamoon variants. 

Source: http://www.darkreading.com/advanced-threats/167901091/security/attacks- 
breaches/240007232/ 



For more stories, see items 6, 8, 21, and 27 

Internet Alert Dashboard 

To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



See items 3 and 34 
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Commercial Facilities Sector 



36. September 13, DNAinfo.com - (New York) 14 people, including 3 firefighters, hurt 
in Bronx fire. An apartment fire in a University Heights building in New York City 
left 14 people, including 3 firefighters, injured September 12, the New York City Fire 
Department (FDNY) said. The fire broke out in a second-floor apartment, an FDNY 
spokesman said. More than 100 firefighters from 25 units were involved in battling it, 
he said. Some of the residents fled the building and several others were evacuated by 
firefighters. Eleven people inside the building were hurt, the spokesman said. Three of 
the injuries were considered serious. The three firefighters suffered minor injuries, the 
FDNY said. All of the victims were taken to a hospital. The fire, which was mostly 
contained to the second-floor apartment where it began, was brought under control 
about 30 minutes after it sparked, the spokesman said. 

Source: http://www.dnainfo.com/new-vork/20120913/university-heights/14-people- 
including-3-firefighters-hurt-bronx-fire 

37. September 13, WMFD 12 Mansfield - (Ohio) Meth lab sparks apartment fire, 
suspect arrested. A fire September 11 in an apartment at an eight-unit apartment 
building in Mansfield, Ohio, led to an arrest. Police said the tenant of the apartment 
was suspected to have been cooking meth when the fire broke-out and gutted his 
apartment and damaged several adjacent units. The suspect fled but was found 
September 13 in a local house. Metrich, Mansfield Police, and the Allied Special 
Response Team raided the small house and arrested the suspect on a first-degree felony 
aggravated arson charge. More charges are expected. Police arrested three other people 
at the location where an inactive meth lab was found in the garage, along with cocaine, 
marijuana, and drug paraphernalia. 

Source: http://www.northcentralohio.com/local-news/single.asp?story=51906 

38. September 12, KNXV 15 Phoenix - (Arizona) PD: 2 pipe bombs found in Peoria 
apartment complex. Residents of a Peoria, Arizona, apartment complex were 
evacuated September 12 after police found two pipe bombs in one of the tenant’s 
homes. A Peoria police spokesman said police were searching one of the apartments for 
narcotics when when they discovered two pipe bombs. The Glendale bomb squad and 
Bureau of Alcohol, Tobacco, Firearms and Explosives were sent to the complex to 
secure the area. The bombs were removed from the home and did not appear activated. 
Surrounding apartments were evacuated for about 1.5 hours. Authorities said the two 
suspects were arrested for possession of narcotics. 

Source: http://www.abcl5.com/dpp/news/region west vallev/peoria/pd-2-pipe-bombs- 
found-in-peoria-apartment-complex 
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39. September 12, Salt Lake Tribune - (Utah) S. Utah flooding causes millions in 
damage, but no one was hurt. The aftermath of flooding from a failed southwestern 
Utah earthen dike that caused an estimated $600,000 in damage to Santa Clara, Utah 
strip mall businesses, the Salt Lake Tribune reported September 12. Businesses in the 
Town Square strip mall sustained heavy damage, as nearly 3 feet of water built up on 
the parking lot and then seeped inside front doors September 11. “The water’s gone, 
but now we have about 3 inches of mud to clean up,” the strip mall owner said. Santa 
Clara city officials were just beginning damage assessments as homeowners and 
volunteers started cleanup September 12, the day after heavy rains overwhelmed an 
earthen dike and sent a 2-3 foot wall of water into dozens of homes and businesses. The 
city manager said the Washington County community estimated at least $3 million in 
damage to the dike, road surfaces and sidewalks alone. That figure is likely to grow 
significantly once residential and business damages are added to the tab. “Right now 
we have 31 homes and 12 businesses flooded,” the city manager said. 

Source: http://www.sltrib.com/sltrib/news/54879987-78/clara-santa-wednesday- 
dike.html .csp 

40. September 12, KCNC 4 Denver - (Colorado) Denver police arrest suspected 
gunman. Police in Denver arrested a suspected gunman who had barricaded himself 
inside a building after he allegedly shot at officers September 12. As officers responded 
to investigate a report of domestic violence, the suspect shot at police. Police blocked 
off the surrounding streets to traffic during the standoff, which added to the already 
slow morning commute because of the rainy weather. Mail delivery was impacted for 
the 10-block area around the standoff. Postal carriers were diverted as they attempted to 
deliver mail later in the day. The gunman remained barricaded inside the building until 
he was arrested about 7.5 hours after the standoff began. Witnesses said that they 
believe the domestic incident started inside a nearby 7-Eleven store. The police activity 
forced Denver Public Schools to place three local schools on lockdown. 

Source: http://denver.cbslocal.com/2012/09/12/shots-fired-denver-schools-lockdown/ 

41. September 12, Sedalia Democrat - { Missouri) Possible bomb found in eastside 
Sedalia trailer park. A suspect will face charges after law enforcement officials 
discovered a possible bomb in a vehicle September 12 at a Sedalia, Missouri, trailer 
park. The Pettis county sheriff said deputies arrived at Lone Pine Trailer Park to serve 
six arrest warrants, and a search warrant. The sheriff’s office press release stated the 
warrants “were in connection with a series of continuing disputes that have occurred 
recently in the park, which have included assaults and repeated peace disturbances 
involving both adults and juveniles.” In the course of their search, deputies found what 
officials described as a “suspicious device” and a handgun in the front seat of a car 
parked at the trailer park and belonging to a known felon. Officials contacted the 
Missouri State Highway Patrol, which dispatched a disposal crew and a bomb squad 
truck to the scene. The crew used a robot to examine the device, however the 
examination was inconclusive so a projectile attached to the robot was fired into the 
device. A resident at the scene said deputies evacuated residents from their homes 
during the event, which lasted more than 4 hours. 

Source: http://www.sedaliademocrat.com/news/article ba275d7c-fd5e-llel-b5ea- 
0019bb30f31a.html 
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For more stories, see items 19 , 42 , and 44 



National Monuments and Icons Sector 



42. September 13, Portland Oregonian - (Oregon; Washington) Hundreds asked to 
evacuate, prepare with wildfires growing in Washington state. More fires flared in 
the Northwest, but Washington State has been hit the hardest, with nearly 150,000 
acres torched, the Portland Oregonian reported September 13. The biggest complex of 
fires in Washington was the Wenatchee complex northeast of Leavenworth, ignited by 
lightning September 7. Those blazes scorched another 16,000 acres between September 
12-13. Officials asked 191 households to evacuate and told residents in another 334 
that they may have to leave immediately, said a spokeswoman for the fire management 
team. Another 209 households have been told to prepare to evacuate. The fires have 
created hazardous breathing conditions. Schools were open but children are not allowed 
outside for recess, and some sports activities were being moved to places not affected 
by the smoke. In Oregon, the Pole Creek fire southwest of Sisters grew nearly 270 
acres September 12-13, covering nearly 4,600 acres. That fire also created smoky 
conditions, with the State Department of Environmental Quality advising residents to 
stay inside if it was too smoky in their areas. The blaze was 5 percent contained, with 
flames torching trees and making short runs. The cause is under investigation. 

Source: http://www.oregonlive.com/pacific-northwest- 
news/index.ssf/20 12/09/more fires flare as northwest.html 
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Dams Sector 



43. September 13, Palm Springs Desert Sun - (California) City lays out plan to build 
dam. Riverside County, California flood officials laid out a timetable to build a 
Cathedral City dam they hope will prevent floods such as the one that overwhelmed a 
stretch of the city’s main roadway August 30. The Palm Springs Desert Sun reported 
September 13 that the Riverside County Flood Control and Water Conservation District 
will put the Eagle Canyon Dam project out to bid in November with construction 
following a few months later. Construction is expected to last 9 months. It will include 
the Line 43 drainage system, which will connect Eagle Canyon to the Cathedral 
Canyon Channel, north of East Palm Canyon Drive. The dam is planned for 405 feet 
above sea level and designed to hold 222 acre-feet of water and 14 acres of debris. It 
will cost at least $8 million. The drainage system will be about $4 million. Both are 
covered by Riverside County flood control funds. 

Source: http://www.mvdesert.com/article/20120913/NEWS01/309130027/City-lavs- 
out-plan-build-dam 

44. September 13, KSTU 13 Salt Lake City - (Utah) Report recommended repairs to 
Santa Clara dike. The dike that broke in Santa Clara, Utah, September 1 1 was rated in 
April 2012 as one of the top 10 dams in Washington County that needed repairs, KSTU 
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13 Salt Lake City reported September 13. The dam safety inspection, conducted by the 
division of water rights, reported the dam had a high hazard level, noting some areas 
that needed maintenance. The report said there were rodent boroughs along the dam 
and that employees needed to control vegetation growing along both sides. Hundreds of 
volunteers were assisting in the massive cleanup effort in Santa Clara September 12. 
Flooding left mud and debris behind while more than a dozen businesses and about 30 
homes were damaged when the dike gave way. The mayor declared the area a disaster 
zone and requested federal funding to help with the cleanup. 

Source: http ://fox 1 3no w .com/20 1 2/09/ 1 3/inspection-report-recommended-repairs-to- 
santa-clara-dike/ 



45. September 12, WJAC 6 Johnstown - (Pennsylvania) Repairs on East Branch Dam to 
cost $280M. A long and costly project is set to begin in a few years to repair leaks at 
the East Branch Dam in Elk County, Pennsylvania, WJAC 6 Johnstown reported 
September 12. The U.S. Army Corps of Engineers noticed seepage issues a few years 
after it was built in 1947. The Corps held a meeting September 12 to address where the 
issue currently stands, and upcoming construction. Analysis of the dam since 2008 
confirmed seepage paths exist through and under the dam; officials said this means 
long-term repairs are needed. The first construction contract for improving the access 
road to the dam was awarded in September 2011 and field explorations were completed 
March 2012 to provide information to design the cut off wall. Officials said the new 
instrumentation installation was completed in June. The entire project is expected to 
cost $280 million with a concrete wall that will go nearly 250 feet deep into the dam. 
The Corps expects the project to begin in 2014 with a completion date set for 2017. 
Source: http://www.wiactv.com/news/news/repairs-east-branch-dam-cost- 
280m/nR9QC/ 

For another story, see item 39 
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